This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json) Hash identifier: Bo1xw6haRtx3SLg5VsR1wJ6Zh1j3oD44Pj9J4/cyOq8= Subject key identifier: 4A:34:28:2E:98:14:8E:54:8E:26:CA:74:2C:38:1B:94:24:20:6B:C5 Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83 Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983 Certificate serial: 019AF19B30427F2D3DAB5FD49509BA18519E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft Manifest number: 1164 Signing time: Sat 06 Dec 2025 03:01:10 +0000 Manifest this update: Sat 06 Dec 2025 03:01:10 +0000 Manifest next update: Sun 07 Dec 2025 03:01:10 +0000 Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: rzfdGETCd8RSDgea+pVgO3f9peyxCuiVulMEi2qqP5c=) 2: CXuHSCaFxVaRaAru4-iFvdd0d-g.roa (hash: po3EKI/Ie4MxQDtGyWIOYbTAnH49FsuKgvn3GW+cz7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:30:42:7f:2d:3d:ab:5f:d4:95:09:ba:18:51:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983 Validity Not Before: Dec 6 03:01:10 2025 GMT Not After : Dec 7 03:01:10 2025 GMT Subject: CN=4a34282e98148e548e26ca742c381b9424206bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:1f:f8:d9:ac:a6:a0:fe:3e:87:a8:49:c9: 52:35:ca:31:c7:71:8d:f5:ee:58:65:79:7a:1a:07: 51:d2:2a:74:62:d1:06:41:46:59:31:bb:43:a0:7f: 70:a0:23:98:85:92:fb:f3:ba:6a:53:a3:06:cc:9e: 88:f7:38:44:69:15:d8:68:44:28:c7:6a:81:45:67: e5:bf:06:36:18:63:a8:70:e9:42:50:2a:72:19:bc: ef:46:a9:a1:e6:24:99:a8:02:1b:97:d0:46:48:62: 8e:1b:10:86:02:08:cd:ff:c1:ec:75:e6:6a:83:cb: 14:0f:16:6c:90:02:fa:ce:25:c2:81:9a:d6:ef:0d: 6a:23:e2:84:ae:bb:b8:4a:b6:30:c8:b4:c8:53:4d: 43:18:3c:44:6f:60:04:17:36:99:35:be:eb:03:c2: de:0f:29:22:12:7d:5b:5a:38:71:88:67:e7:48:25: 67:88:39:01:62:9d:fa:ba:75:9c:05:20:ed:e9:ba: 87:ff:af:e9:1f:fd:a3:e6:7a:d6:3f:dc:7d:e1:dd: 31:e2:6d:2e:1d:c5:f2:b9:c6:bb:a5:0a:03:07:95: 6a:b3:6a:0e:b6:49:dd:da:8a:52:9a:a9:65:aa:e6: 65:aa:87:cf:b9:52:97:75:b5:86:f9:ce:59:72:7c: 9e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:34:28:2E:98:14:8E:54:8E:26:CA:74:2C:38:1B:94:24:20:6B:C5 X509v3 Authority Key Identifier: keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:02:1e:1a:f5:27:f4:2e:a5:f5:9e:d9:71:3d:9c:49:32:1b: 2c:b6:09:87:ac:65:2c:7b:00:b2:db:e3:aa:11:8e:22:17:cf: 8d:d3:27:ea:e3:26:aa:bc:49:48:b9:10:40:22:08:22:1f:94: 81:58:81:f9:63:4c:2a:16:63:10:89:36:48:95:5c:4a:00:4c: 6b:5f:a3:d8:73:ed:03:6b:f9:60:69:bc:1a:60:a9:e2:70:c2: 52:d1:e2:82:41:82:fb:d4:ae:3d:70:f3:f6:56:68:70:d7:6a: 07:46:32:b1:45:86:b3:52:5a:f6:e0:5a:c1:bd:93:5b:29:19: 26:26:97:61:49:21:ed:0b:84:61:33:09:e9:fa:05:18:18:a0: c8:37:f0:77:0b:cd:d9:93:4f:e6:d5:c4:51:a0:b4:2d:65:e3: 8d:08:0e:50:4e:a6:6c:56:69:78:ce:22:7c:77:86:cd:82:87: 71:11:10:29:a5:8e:b2:f4:e3:49:86:d5:c6:50:eb:93:13:9b: f1:70:a5:e6:26:34:17:26:eb:82:b6:5d:d4:b9:9c:81:6f:08: 2e:11:92:34:b7:94:15:50:3d:ad:e4:91:52:a3:7a:ef:86:29: 8e:47:ed:19:6f:50:31:18:89:0c:6e:d3:3e:6b:bc:e8:97:13: db:61:a5:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzBCfy09q1/UlQm6GFGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNWUzNmYxNTlmNTc2OTg4ZmI0ZTUxZDQxMDFiYjg1ZDBk MGM5ODMwHhcNMjUxMjA2MDMwMTEwWhcNMjUxMjA3MDMwMTEwWjAzMTEwLwYDVQQD Eyg0YTM0MjgyZTk4MTQ4ZTU0OGUyNmNhNzQyYzM4MWI5NDI0MjA2YmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBkf+NmspqD+PoeoSclSNcoxx3GN 9e5YZXl6GgdR0ip0YtEGQUZZMbtDoH9woCOYhZL787pqU6MGzJ6I9zhEaRXYaEQo x2qBRWflvwY2GGOocOlCUCpyGbzvRqmh5iSZqAIbl9BGSGKOGxCGAgjN/8HsdeZq g8sUDxZskAL6ziXCgZrW7w1qI+KErru4SrYwyLTIU01DGDxEb2AEFzaZNb7rA8Le DykiEn1bWjhxiGfnSCVniDkBYp36unWcBSDt6bqH/6/pH/2j5nrWP9x94d0x4m0u HcXyuca7pQoDB5Vqs2oOtknd2opSmqllquZlqofPuVKXdbWG+c5Zcnye8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEo0KC6YFI5UjibKdCw4G5QkIGvFMB8GA1UdIwQY MBaAFN5eNvFZ9XaYj7TlHUEBu4XQ0MmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAt ZWJiYmI0NDQyODZlLzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAtZWJiYmI0NDQyODZl LzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwIeGvUn 9C6l9Z7ZcT2cSTIbLLYJh6xlLHsAstvjqhGOIhfPjdMn6uMmqrxJSLkQQCIIIh+U gViB+WNMKhZjEIk2SJVcSgBMa1+j2HPtA2v5YGm8GmCp4nDCUtHigkGC+9SuPXDz 9lZocNdqB0YysUWGs1Ja9uBawb2TWykZJiaXYUkh7QuEYTMJ6foFGBigyDfwdwvN 2ZNP5tXEUaC0LWXjjQgOUE6mbFZpeM4ifHeGzYKHcREQKaWOsvTjSYbVxlDrkxOb 8XCl5iY0FybrgrZd1LmcgW8ILhGSNLeUFVA9reSRUqN674YpjkftGW9QMRiJDG7T Pmu86JcT22GlRw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:04 2025 by rpki-client